Splunk with suricatanot reading eve.json

Getting Data In

I have checked suricata TA app for reading intrusion but as I see it doesn't read eve.json but it reads only fast.log
How to add into it eve.json?

Can you share inputs.conf you are using?

Get Updates on the Splunk Community!

The Big One: Splunk 10 is Here! The moment many of you have been waiting for has arrived! We are thrilled to ...

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

Are you a member of the Splunk Community?